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FOREWORD 


The  U.S.  Army  Combat  Systems  Test  Activity  (USACSTA)  located  at  Aberdeen 
Proving  Ground  (APG) ,  MD,  was  responsible  for  planning,  researching,  conducting, 
and  reporting  this  investigation.  Funds  were  provided  by  the  U.S.  Army  Test  and 
Evaluation  Command  RDTE  (D625)  Methodology  Improvement  Program. 

A  special  appreciation  is  extended  to  Messrs.  Martin  Mossa,  William  Watson, 
and  Rodolfo  Gil  from  the  USACSTA  Safety  Office.  Their  support  in  running  the 
computer  model  to  determine  the  cut  sets  and  single  point  failures  was  important 
to  the  successful  completion  of  this  project.  The  authors  would  also  like  to 
acknowledge  the  contributions  of  Mr.  Harry  Reeves  and  Dr.  Philip  Howe  from  the 
U.S.  Army  Ballistics  Research  Laboratory  (USABRL) ,  APG,  whose  insights  helped 
focus  and  guide  the  technical  considerations  of  this  report.  The  computer 
modeling  in  this  report  was  accomplished  using  Fault  Tree  Anaivsig  u.sing 
P°r~'-naL  Computers  version  6  August  1987  developed  by  Jack  Copeland. 

This  report  was  developed  for  the  Research  and  Development  Subcommittee  of 
the  Army  Materiel  Command  (AMC)  Action  Committee  for  System  Safety  by  the  U.S. 
Army  Combat  Systems  Test  Activity  (USACSTA)  personnel  at  Aberdeen  Proving  Ground 
(APG),  MD.  The  authors  of  this  report  are;  Mr.  Richard  B.  Shipe,  and  Mr. 
Thomas  A.  Lucas,  USACSTA. 
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SECTION  1 ■  SUMMARY 


1 . 1  BACKGROUND 

a.  General.  The  mission  of  the  U.S.  Army  Combat  Systems  Test  Activity 
(USACSTA) ,  Aberdeen  Proving  Ground  (APG) ,  MD,  includes  the  assessment  of  large 
caliber  weapons.  As  these  weapons  increase  in  size,  so  does  the  danger 
associated  with  testing  them.  This  problem  is  experienced  not  only  at  APG  but 
also  at  other  installations  in  the  Department  of  Defense  (DoD)  where  live  fire 
programs  are  conducted.  The  risk  associated  with  such  testing  must  be 
recognized  and  controlled.  A  conscious  effort  must  be  made  to  cost  effectively 
moderate  the  hazards  inherent  with  testing  weapons . 

Other  influences  associated  with  the  operation  of  these  facilities  are  land 
usage,  environmental  restrictions,  and  construction  costs.  The  availability  of 
land  for  large  caliber  firing  ranges  is  decreasing.  Because  of  that 
unavailability,  incompatible  operations  are  often  conducted  contiguously.  In 
these  cases,  personnel  and  facilities  are  subject  to  high-risk  exposures; 
kickout  is  one  such  exposure.  Because  of  the  high  cost  of  constructing  test 
facilities,  alternatives  designed  in  the  context  of  a  risk  profile  are 
desirable.  Using  analytic  techniques,  like  the  fault  tree  analysis  contained  in 
this  report,  such  a  profile  can  be  developed.  This  study  suggests  a  profile 
from  which  can  be  derived  safe  and  cost  effective  alternatives. 

b.  Specific.  This  study  deals  with  the  problem  of  kickout,  which  affects 
the  design  of  magazines,  barricades,  and  other  suppressive  structures.  Kickout 
is  defined  as  the  escape  from  a  containment  structure  (such  as  a  test  facility) 
of  an  unexploded  round  of  ammunition  following  an  explo.oion  in  the  structure. 
This  study  does  not  present  a  direct  solution  to  the  kickout  problem  simply 
because  there  isn't  one.  There  is  no  guarantee  that  an  explosion  will  never 
happen  in  a  test  structure  or  a  round  of  ammunition  will  never  be  ejected.  What 
this  study  does  is  define  the  mechanisms  which  cause  a  kickout  and  logically 
describe  the  order  of  their  occurrence.  The  solution  provided  in  this  report  is 
an  identification  of  the  events  and  hazards  associated  with  the  kickout 
phenomenon  so  the  risk  can  be  understood.  By  controlling  selected  hazards,  the 
risk  is  reduced.  If  it  has  been  reduced  to  an  acceptable  degree,  the 
requirements  applied  to  the  design  and  subsequent  operation  of  any  facility  can 
be  relaxed. 

1.2  OBJECTIVES 

’  A 

The  objectives  of  this  study  are  to: 

a.  Define  kickout. 

b.  Define  the  mechanisms  that  cause  a  kickout. 

c.  Determine  the  logical  sequence  of  those  mechanisms. 
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1.3  SUMMARY  OF  PROCEDURES 

Initially,  the  main  thrust  of  the  investigation  was  directed  towards  a 
literature  search.  The  intent  of  the  search  was  to  identify  the  available  data 
and  to  better  describe  the  kickout  problem.  As  the  literature  search 
progressed,  it  became  evident  the  study  had  to  include  a  foundation  -  the  causes 
of  a  kickout.  The  scope  of  the  project  was  expanded  to  include  the 
relationships  between  those  causes  and  the  mechanisms  that  controlled  them.  It 
was  natural  then  to  use  a  Fault  Tree  Analysis  to  better  understand  those 
mechanisms.  An  additional  benefit  of  this  type  of  analysis  is  the  use  of 
Boolean  Algebra  to  quantify  the  results.  The  results  of  this  study  would  not 
only  benefit  the  construction  of  the  new  vibration  facility  but  also  the 
construction  of  new  firing  barricades  at  the  Main  Front  firing  positions  at 
APG.  Many  of  these  facilities  are  in  the  vicinity  of  incompatible  operations. 
Because  of  this  incompatibility  the  local  work  force  and  those  who  are  not 
related  to  the  test  operations  are  at  risk.  Information  from  the  litera;.ure 
search  and  from  discussions  with  personnel  at  USABRL  was  incorporated  in  the 
design  of  the  fault  tree.  Once  the  tree  was  developed,  a  computer  model  was 
used  to  identify  single  point  failures  and  minimal  cut  sets,  the  definitions  of 
which  are  in  Appendix  B,  section  2  of  this  report.  The  fault  tree  and  results 
of  the  computer  model  assessment  are  included  in  paragraph  1.4.  An  example 
model  is  contained  in  Appendix  C,  section  2.  A  discussion  of  these  results 
follows  in  paragraph  1.5. 

1.4  SUMMARY  OF  RESULTS 

a.  Figures  1.4-1  through  1.4-22  contain  an  explanation  of  fault  tree 
symbols  followed  by  the  tree. 

b.  Figures  1.4-23  through  1.4-28  contain  the  results  of  the  computer  model 
assessment . 
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1.4  (Cont'd) 


The  rectangle  identifies  an  event  that 
results  from  the  combination  of  fault 
events  through  the  input  logic  gate. 


The  circle  describes  a  basic  fault  event 
that  requires  no  further  development. 


The  diamond  describes  a  fault  event 
that  is  considered  basic  in  a  given  Fault 
Tree.  The  possible  causes  of  the  event 
are  not  developed  further,  either  be¬ 
cause  the  event  is  of  insufficient  con¬ 
sequence  or  the  necessary  information 
is  unavailable. 


The  house  indicates  an  event  that  is 
normally  expected  to  occur,  such  as  a 
phase  change  in  a  dynamic  system. 


The  triangles  are  used  as  transfer  sym¬ 
bols.  A  line  from  the  apex  indicates  a 
transfer  in,  and  a  line  from  the  side 
shows  a  transfer  out. 


Output 


m 


Inputs 

Output 


Inputs 


AMD  GATE  describes  the  logical  oper¬ 
ation  where  all  the  inputs  must  occur 
to  produce  the  output  event. 


OR  GA  TE  describes  the  logical  opera¬ 
tion  where  any  one  of  the  inputs  will 
cause  the  output  event. 


Figure  1.4-1.  Fault  tree  sjrmbols. 
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Figure  1.4-4 


1.4  (Cont'd) 
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Figure  1,4-6. 


1.4  (Cont'd) 
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1.4  (Conc'd) 
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1.4  (Cont'd) 
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Figure  1.4-10. 


1.4  (Cont'd) 
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Figure  1.4-14. 


1.4  (Cont’d) 
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Figure  1.4-16. 


1.4  (Cont'd) 
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1.4  (Cont'd) 
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Figure  1.4-18. 


1./,  (Cont'd) 
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Figure  1.4-20. 


1.4  (Cont'd) 
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1.4  (Cont'd) 

FAULT  TREE  ANALYSIS  PROGRAM 
********  *.*  ************************** 


INPUT  DATA  LIST 


TOP  EVENT  :  MUNITION  OUTSIDE  STRUCTURE 
GATE  DATA 

1  B3  A  2  0  B1  B13  - 

2  B1  O  3  0  CO  C2  C3  - 

3  C2  O  1  2  D3  XCl  DCl  - 

4  C3  O  4  0  D4  D5  D8  D6  —  — 

5  C5  O  1  1  D7  DD5  —  — - 

6  D1  A  2  0  El  E2  - 

7  D3  A  0  3  DD2  DD3  DD8 - 

8  D4  A  1  2  E4  XDl  DD7  - 

9  D5  A  1  2  E4  XDl  DD7  —  - 

10  D6  A  1  1  E6  DE6  - 

11  D7  O  1  2  E8  DE13  DEIS  - 

12  El  A  0  2  HEl  XEl  - 

13  E2  O  0  5  XE3  XE4  XE5  XE6  DE7  — 

14  E3  A  1  2  E2  DEI  DE3  —  - 

15  E4  O  2  0  F2  F3  —  —  —  — 

16  E6  O  1  1  FI  DE2  - 

17  E8  O  0  2  XF3  DF4  - 

18  FI  O  0  3  DFl  DF2  DF3  — - 

19  F2  A  1  1  HI  XLl  - 

20  F3  O  0  2  DLl  DL2  —  —  —  — 

21  HI  O  2  0  H2  H3  - 

22  H2  O  0  2  DLl  DL2  - 

23  H3  A  1  3  H4  D  F  G - 

24  H4  O  0  2  DLl  DL2  - 

25  D8  A  1  1  F3  DD6  - 

26  CO  A  1  1  Cl  DCO  — - — 

27  B13  A  1  1  C5  DB13 - — 

28  A2  O  1  1  B3  DB3 - 

29  Cl  O  2  1  D1  E3  DDl  - 

30  - 


MUNITION  THROWN  FROM  STRUCTURE 
HIGH  ORDER  DETONATION 
HEAT  FROM  RARE  EXPOSURE 
INITIATION  BY  KE 
UNOBSTRUCTED  PATH  TO  EXTERIOR 
VIOLENT  BURN  OF  PROPELLENT 
HEAT  FROM  STATIC  DISCHARGE 
WARHEAD  INITIATION 
PROPELLENT  INITIATION 
TRAUMATIC  PRESSURE  VESSEL  FAILURE 
STRUCTURAL  FAILURE 
BUILDUP  OF  PRESSURE  IN  CASE 
HEAT  SOURCE 

INITIATION  OF  HE  BY  FIRE 

SOURCE  OF  ENERGY  INPUT 

OPENING  IN  VESSEL 

LOSS  OF  WEAK  WALL 

MATERIAL  FAILURE 

BLAST 

IMPACT 

SHOCK  INITIATION 

INITIATION  OF  HOMOGENEOUS  MATERIAL 
INIT.  OF  NON-HOMOGENEOUS  MATERIAL 
SHOCK  WAVE  IMPACT 
PRIMER  INITIATION 

INITIATION  BY  EXTERNAL  HEAT  SOURCE 
ROUND  GOES  THROUGH  OPENING 
MUNITION  OUTSIDE  STRUCTURE 
RND  EXPOSED  TO  HEAT  SOURCE 


FAULT  EVENT  DATA 

1  DE15  D  HOLE  IN  STRUCTURE 

2  XCl  F  LIGHTNING  STRIKES 

3  DCl  D  SABOTAGE 

4  DDl  D  COOK-OFF  OF  DETONATOR  IN  FUZE 

5  DD2  D  STATIC  BUILD-UP 

6  DD3  D  CURRENT  PATH  TO  RECEPTOR 

7  XDl  F  ENERGY  TRANSFER  DONOR  TO  RECEIVER 

8  DD5  D  OPEN  DOOR 

9  HEl  H  BULLET  ATTACHED  TO  CASE 

10  XEl  F  CASE  INTACT 

11  DEI  D  PRESSURE  BUILD-UP  IN  WAR  HEAD 

12  XE3  F  HOT  FRAGMENT 

13  XE4  F  BURNING  PROPELLENT 

14  XE5  F  DEBRIS  FIRE 

15  XE6  F  PRIMER  IGNITION 

16  DF2  D  MATERIAL  INCOMPATIBLITY 

17  DF3  D  MATERIEL  W/  DESIGN  DEFECT 

18  DE2  D  PUNCTURE 

19  XF3  F  BLOWOUT  DOOR 

20  DFl  D  DEFECTIVE  MATERIAL 

21  DD8  D  IMPERFECT  GROUND 

22  DD7  D  ENERGY  EXCEEDS  INITIATION  THRESHOLD 

23  DD6  D  FRAGMENT  HAS  SUFFICIENT  KE  TO  INITIATE 

24  DE3  D  ADEQUATE  EXPOSURE  TIME 

25  DE13  D  CATASTROPHIC  LOSS  OF  STRUCTURE 

26  XLl  F  RECEIVER  NEAR  DONOR 

27  DL2  D  ROUND  STRIKES  OBJECT 

28  DLl  D  ROUND  STRUCK  BY  OBJECT 

29  D  D  COMPRESSION  OF  VOIDS 

30  F  D  TEMPERATURE  AT  VOID  =  IGNITION  TEMP. 

31  G  D  VOIDS/DISCONTINUITIES  PRESENT 

32  DE6  D  PRESSURIZED  FLUIDS 

33  DF4  D  DAMAGE  TO  SUPPRESSIVE  SHIELD 

34  DCO  D  FIRE  SUPPRESSION  SYSTEM  FAILS 

35  DB13  D  ROUND  FOLLOWS  PATH  TO  EXTERIOR 

36  DE7  D  ELECTRICAL  EXPLOSION 

37  DB3  D  RND  ALREADY  OUTSIDE  STRUCTURE 


Figure  1.4-23.  Fault  Tree  Analysis  Program. 
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1.4  (Cont'd) 

*********************************** 

FAULT  TREE  ANALYSIS  PROGRAM 
************************************ 


MINIMUM  CUT  SET  SIZE  =  1 

MAXIMUM  GUT  SET  SIZE  =  3 

CUT  SETS  FOR  MUNITION  OUTSIDE  STRUCTURE 


CUT  SET 
DB3 

CUT  SET 
DE15 
XCl 
DB13 


# 


RND  ALREADY  OUTSIDE  STRUCTURE 


HOLE  IN  STRUCTURE 
LIGHTNING  STRIKES 
ROUND  FOLLOWS  PATH  TO  EXTERIOR 


CUT  SET  # 
DE15 
DCl 
DB13 


HOLE  IN  STRUCTURE 
SABOTAGE 

ROUND  FOLLOWS  PATH  TO  EXTERIOR 


CUT  SET  # 

XCl 

DD5 

DB13 


LIGHTNING  STRIKES 
OPEN  DOOR 

ROUND  FOLLOWS  PATH  TO  EXTERIOR 


CUT  SET  # 

XCl 

XF3 

DB13 


LIGHTNING  STRIKES 
BLOWOUT  DOOR 

ROUND  FOLLOWS  PATH  TO  EXTERIOR 


CUT  SET  # 
XCl 
DE13 
DB13 


LIGHTNING  STRIKES 
CATASTROPHIC  LOSS  OF  STRUCTURE 
ROUND  FOLLOWS  PATH  TO  EXTERIOR 


CUT  SET  # 

XCl 

DF4 

DB13 


LIGHTNING  STRIKES 

DAMAGE  TO  SUPPRESSIVE  SHIELD 

ROUND  FOLLOWS  PATH  TO  EXTERIOR 


CUT  SET  # 

DCl 

DD5 

DB13 


SABOTAGE 
OPEN  DOOR 

ROUND  FOLLOWS  PATH  TO  EXTERIOR 


CUT  SET  # 

DCl 

XF3 

DB13 


SABOTAGE 
BLOWOUT  DOOR 

ROUND  FOLLOWS  PATH  TO  EXTERIOR 


CUT  SET  # 
DCl 
DE13 
DB13 


SABOTAGE 

CATASTROPHIC  LOSS  OF  STRUCTURE 
ROUND  FOLLOWS  PATH  TO  EXTERIOR 


CUT  SET  # 
DCl 
DF4 
DB13 


SABOTAGE 

DAMAGE  TO  SUPPRESSIVE  SHIELD 
ROUND  FOLLOWS  PATH  TO  EXTERIOR 


*****  end  of  cut  set  list  for  sizes  1  THRU  3 


Figure  1.4-24.  Fault  Tree  Analysis  Program 
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1.4  (Cont'd) 

ieitic'kieic'k'k-k'k'kie'kitieit'kit'it'kit'kifit'kifk'kitic'k'kifis'k 

FAULT  TREE  ANALYSIS  PROGRAM 

ic-k'kitie-k-k’kic'kilit'kieitit'kii'kit'kif'kitititititititieilifiticit 


INPUT  DATA  LIST 

TOP  EVENT  ;  RbUND  TRANSMITS  ENERGY 
GATE  DATA 

1  A4  O  2  0  B12  B2 - 

2  B2  O  1  1  B20  XB21  - 

3  B20  A  0  3  XB22  XB20  HB20 

4  B12  030  C32  COl  D32  — 


5  C32  040  D61  D81  D41  D51  — 

6  COl  All  C12  DCOl  —  —  - 

7  D32  A  0  3  DD22  DD82  DD32  - 

8  D61  All  E61  DE61  - 

9  E61  .0  0  2  DF21  DE21  —  —  — 

10  C12  021  D12  E32  DD12  - 

11  D12  A  2  0  E12  E22  —  —  —  — 

12  E12  A  0  2  HE12  XE12  - 

13  E22  004  XE31  XE41  XE51  XE61 

14  D81  All  F31  DD61  - 

15  F31  002  DLll  DL21  - 

16  D41  A  1  2  E41  XDll  DD71  - 

17  D51  A  1  2  E41  XDll  DD71  - 

18  E41  020  F31  F22  —  —  - 

19  F22  All  H12  XL12  - 

20  H12  020  H21  H31  - 

21  H21  002  DLll  DL21  - 

22  H31  A  1  3  H41  DDll  DF12  DG12 

23  E32  A  1  2  E22  DE32  DE12  - 

24  H41  002  DLll  DL21  - 

25  A1  O  1  1  A4  DA3  - 


ROUND  DETONATES 

INTER.  MECH.  ALLOWS  FUZE  TO  FUNCTION 

PROPER  FUNCTIONING  OF  FUSE  TRAIN 
EXT.  ENERGY  SOURCE=>FUNCTIONING  FUZE 

HEAT  INPUT=> INITIATION 
INITIATION  BY  EXT.  HEAT  SOURCE 
HEAT  FROM  STATIC  DISCHARGE 
TRAUMATIC  PRESSURE  VESSEL  FAILURE 
OPENING  IN  VESSEL 

ROUND  EXPOSED  TO  EXT.  HEAT  SOURCE 
VIOLENT  BURN  OF  PROPELLENT 
BUILD  UP  OF  PRESSURE  IN  CASE 
— HEAT  SOURCE 

PRIMER  INITIATION 
IMPACT 

PROPELLENT  INITIATION 
WARHEAD  INITIATION 
SOURCE  OF  ENERGY  INPUT 
BLAST 

SHOCK  INITIATION 
INIT.  OF  HOMOGENEOUS  MATERIAL 
-  INIT.  OF  NON-HOMOGENEOUS  MATERIAL 
INITIATION  OF  HE  BY  FIRE 
SHOCK  WAVE  IMPACT 
ROUND  TRANSMITS  ENERGY 


FAULT  EVENT  DATA 

1  XB21  F  FUZE  FAIL  UNSAFE 

2  XB22  F  ROUND  IS  PROPELLED 

3  XB20  F  FUZE  SAFETY  DEFEATED 

4  HB20  H  WARHEAD  DETONATED 

5  DCOl  D  FIRE  SUPP.  SYS  FAILS 

6  DD22  D  STATIC  CHARGE  BLD-UP 

7  DD82  D  IMPERFECT  GROUND 

8  DD32  D  CURRENT  PATH  TO  RECEPTOR 

9  DE61  D  PRESSURIZED  FLUID  IN  VESSEL 

10  DF21  D  MATERIAL  FAILS  (VESSEL) 

11  DE21  D  VESSEL  PUNCTURES 

12  DD12  D  FUZE  DETONATOR  COOK-OFF 

13  HE12  H  BULLET  ATTACHED  TO  CASE 

14  XE12  F  CASE  INTACT 

15  XE31  F  HOT  FRAGMENT 

16  XE41  F  BURNING  PROPELLANT 

17  XE51  F  DEBRIS  FIRE 

18  XE61  F  PRIMER  IGNITION 

19  DD61  D  FRAGMENT  KE  IGNITE  PRIMER 

20  XDll  F  ENERGY  TRANSFER-DONOR/RECEIVER 

21  DD71  D  SOURCE  ENERGY  >  INITIATION  THRESHOLD 

22  XL12  F  RECEIVER  NEAR  DONOR 

23  DLll  D  RND  STRUCK  BY  OBJECT 

24  DL21  D  RND  STRIKES  OBJECT 

25  DDll  D  COMPRESSION  OF  VOIDS 


26  DF12  D  VOID  TEMP.  =  INITIATION 

27  DG12  D  VOIDS  PRESENT 

28  DE32  D  ADEQUATE  EXPOSURE  TIME 

29  DE12  D  PRESSURE  BUILD-UP  IN  WARHEAD 

30  DA3  D  FRAGMENTS  WITH=>79  JOULES  ENERGY 


Figure  1.4-25.  Fault  Tree  Analysis  Program 


1.4  (Cont'd) 

*********************************** 
FAULT  TREE  ANALYSIS  PROGRAM 
************************************ 


MINIMUM  CUT  SET  SIZE  =  1 

MAXIMUM  CUT  SET  SIZE  =  3 


CUT  SETS  FOR  ROUND  TRANSMITS  ENERGY 
FUZE  FAIL  UNSAFE 

FRAGMENTS  WITH=>79  JOULES  ENERGY 


CUT  SET  # 
XB21 

CUT  SET  # 
DA3 


CUT  SET  # 

DCOl 

DD12 


2 

3 


FIRE  SUPP.  SYS  FAILS 
FUZE  DETONATOR  COOK-OFF 


CUT  SET  # 

DE61 

DF21 


PRESSURIZED  FLUID  IN  VESSEL 
MATERIAL  FAILS  (VESSEL) 


CUT  SET  # 

DE61 

DE21 


PRESSURIZED  FLUID  IN  VESSEL 
VESSEL  PUNCTURES 


CUT  SET  # 

DD61 

DLll 


FRAGMENT  KE  IGNITE  PRIMER 
RND  STRUCK  BY  OBJECT 


CUT  SET  # 

DD61 

DL21 


FRAGMENT  KE  IGNITE  PRIMER 
RND  STRIKES  OBJECT 


CUT  SET  # 
XB22 
XB20 
HB20 


ROUND  IS  PROPELLED 
FUZE  SAFETY  DEFEATED 
WARHEAD  DETONATED 


CUT  SET  # 
DD22 
DD82 
DD32 


STATIC  CHARGE  BLD-UP 
IMPERFECT  GROUND 
CURRENT  PATH  TO  RECEPTOR 


CUT  SET  # 
XDll 
DD71 
DLll 


ENERGY  TRANSFER-DONOR/RECEIVER 
SOURCE  ENERGY  >  INITIATION  THRESHOLD 
RND  STRUCK  BY  OBJECT 


CUT  SET  # 
XDll 
DD71 
DL21 


ENERGY  TRANSFER-DONOR/RECEIVER 
SOURCE  ENERGY  >  INITIATION  THRESHOLD 
RND  STRIKES  OBJECT 


END  OF  CUT  SET  LIST  FOR  SIZES  1  THRU  3 


Figure  1.4-26.  Fault  Tree  Analysis  Program. 
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***** 


1.4  (Cont'd) 


Ifkhlfk-k-klfk-k-k-k-lfk-k'ififk'klfk-kifltle-k'klfk-kii-kifk* 

FAULT  TREE  ANALYSIS  PROGRAM 

•k-k-k-k-k-k-k-klfkltlfkifkliltlfklfklt-k'klililtliitlfk'k'klfklt 

INPUT  DATA  LIST 

TOP  EVENT  ;  INJ.  TO  PSNL/FCLTY  DAMAGE 
GATE  DATA 

1  TE  A  1  2  AlO  DAI  DA2  - 

2  AlO  0  0  2  DAIO  DAll -  PSNL/FCLTY  EXPOSURE 

FAULT  EVENT  DATA 

1  DAI  D  RND  TRNSMTS  ENERGY 

2  DA2  D  RND  OUTSIDE  STRUCTURE 

3  DAIO  D  PSNL  IN  AREA  OF  XPLSN 

4  DAll  D  PSNL  IN  PATH  OF  FRGMNT 


Figure  1.4-27.  Fault  Tree  Analysis  Program. 
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1.4  (Cont'd) 


ifk1fk1c1fkifkifk1e-k'k1c1e‘k1tifk‘k1e-k1fk1t-kic‘k1fkitifk'k 

FAULT  TREE  ANALYSIS  PROGRAM 
************************************ 


MINIMUM  CUT  SET  SIZE  =  1 

MAXIMUM  CUT  SET  SIZE  =  3 

CUT  SETS  FOR  INJ.  TO  PSNL/FCLTY  DAMAGE 

# 


CUT  SET 
DAI 
DA2 
DAIO 


RND  TRNSMTS  ENERGY 
RND  OUTSIDE  STRUCTURE 
PSNL  IN  AREA  OF  XPLSN 


CUT  SET  #  2 

DAI 

DA2 

DAI  1 


RND  TRNSMTS  ENERGY 
RND  OUTSIDE  STRUCTURE 
PSNL  IN  PATH  OF  FRGMNT 


*****  end  of  cut  set  list  FOR  SIZES  1  THRU  3 


Figure  1.4-28.  Fault  Tree  Analysis  Program. 


***** 
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1.5  ANALYSIS 


a.  Literature  Search.  As  mentioned  in  paragraph  1.3,  a  comprehensive 
literature  search  was  conducted.  The  search  covered  all  calibers  of  ammunition 
from  small  arms  to  175  mm.  Included  was  ammunition  for  mortars,  howitzers, 
field  artillery,  tanks,  and  also  missiles.  Structure  tjrpes  which  were 
investigated  included  ammunition  storage  facilities,  climatic  and  vibration  test 
chambers,  and  firing  barricades  for  protecting  personnel  and  support 
equipment.  Although  covered  by  standing  operating  procedures  (SOPs) ,  modes  of 
transportation  and  ammunition  handling  were  included.  The  literature  search 
covered  all  environments  under  which  ammunition  could  be  stored,  transported,  or 
tested.  This  information  would  be  used  to  address  safety  issues  regarding  the 
design  and  operation  of  new  and  existing  test  facilities  for  the  DoD.  Over  500 
publications  were  examined  and  those  pertinent  listed  in  Appendix  D.  The 
listing  has  been  divided  into  two  groups.  The  first  group  of  documents  are 
those  used  to  develop  the  fault  tree.  The  second  group  contains  information 
about  construction  materials  and  techniques  which  is  indirectly  related  to 
this  study,  but  not  of  use  in  developing  the  fault  tree.  The  documents  in  this 
group  were  considered  of  value  for  a  planned  follow-on  study. 

b.  Fault  Tree.  Following  the  literature  search,  a  kickout  scenario  was 
established  and  diagramed  as  a  fault  tree.  The  tree  is  a  logic  diagram 
consisting  of  three  sections  -  called  branched  -  each  representing  one  variable 
of  a  mathematical  statement.  Logically,  the  head  event  can  occur  only  if  the 
underlying  conditions  in  each  branch  have  been  satisfied.  Each  of  the  three 
branches  defines  one  of  the  general  conditions  leading  to  the  undesired  outcome. 
That  outcome,  called  the  Head  Event  ,  is  defined  as  injury  to  personnel  or 
facility  damage  caused  by  a  missile  or  by  blast  overpressure.  The  tree  flows 
downward  from  the  head  event  to  the  specific  root  causes.  General  outcomes  at 
the  head  of  the  tree  are  connected  to  intermediate  and  root  causes  (fault 
events)  by  logic  gates.  The  gates  depict  the  logical  conditions  of  union  and 
intersection  which  are  analogous  to  addition  and  multiplication.  In  the  text, 
an  additive  or  union  condition  is  represented  by  an  italized  or;  a 
multiplicative  or  intersection  condition  by  an  italized  and. 

The  Head  Event  occurring  as  a  result  of  kickout  is  a  very  specific  and 
special  case.  The  conditions  for  that  case  are:  a  round  of  ammunition  outside 
the  structure,  and  a  person  or  facility  exposed,  and  that  a  round  of  ammunition 
transmits  energy.  There  are  two  ways  a  munition  might  cause  damage.  If  it  is 
intact,  the  round  can  impart  energy  only  if  it  is  thrown  or  propelled  and 
directly  strikes  a  receiver.  Alternately,  it  can  detonate.  Where  the 
detonation  occurs  is  significant.  An  exploding  bomb  can  cause  damage  within 
some  limited  radius.  If  no  receiver  is  within  that  radius,  no  damage  or  injury 
can  be  imparted.  At  military  installations,  undesirable  exposures  often  exist; 
people  and  facilities  are  usually  within  the  radius  at  which  a  bomb,  detonating 
unsuppressed,  can  cause  damage  or  injury.  Explosives  are  stored  in  a  way  that 
limits  this  exposure.  They  are  isolated  from  populated  areas  and  stored  in 
bunkers  designed  to  contain  or  direct  the  missile  and  shock  wave  that  mignt 

^In  this  report,  the  terms  "Head  Event"  and  "Top  Event"  are  interchangeable. 
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1.5  (Cont'd) 

result  from  an  explosion.  The  left  branch  of  the  tree  details  the  way  blast  and 
fragmentation  mitigation  features  of  a  protective  structure  can  be  defeated. 
This  branch  defines  the  circumstances  that  must  exist  for  a  receiver  to  be 
directly  exposed  to  an  unexpected  energy  transfer.  Most  often,  direct  exposure 
occures  when  ammunition  is  being  packed  or  unpacked,  transported,  or  handled 
during  testing.  While  exposure  clearly  exists  in  these  cases,  the  risk  of  an 
accident  is  controlled  through  the  use  of  training  and  special  procedures  which 
minimize  the  likelihood  of  an  event. 


For  a  kickout  to  occur,  a  round  of  ammunition  must  be  thrown  outside  a 
suppressive  structure.  An  impulsive  energy  source  and  a  path  out  of  the 
structure  must  be  present,  and  the  round,  when  thrown,  must  travel  along  that 
path.  An  impulsive  release  of  energy  is  necessary  for  a  kickout  to  occur.  That 
release  might  result  from  a  detonation,  a  pressure  vessel  failure,  or  an 
electrical  explosion.  A  path  out  of  the  containment  structure  might 
exist  because  of  a  structural  failure,  an  inherent  weakness,  or  because  a 
natural  opening  exists  (e.g.  doors,  windows,  or  frangible  surfaces). 

Exposure  of  personnel  and  facilities  to  the  hazards  of  kickout  are  briefly 
detailed  in  the  central  branch  of  the  tree.  The  branch  is  separated  into  two 
sections.  One  is  the  blast  overpressure  hazard  and  the  other  a  missile  or 
fragment  hazard.  Neither  of  these  conditions  have  been  developed  because  of 
their  complexity  although  both  normally  exist. 

The  third  condition  that  must  be  met  is  defined  in  the  right  branch  of  the 
tree.  For  damage  to  be  incurred,  the  kicked-out  munition  must  transfer  energy. 
The  transfer  might  result  from  the  blast  shock  of  the  detonation,  or  from 
missiles  such  as  secondary  fragments.  A  fragment  can  only  cause  damage  if  it 
directly  strikes  a  receiver  and  transfers  sufficient  energy  (the  accepted  lower 
limit  for  that  energy  transfer  is  79  joules).  Another  way  for  a  munition  to 
cause  injury  or  damage  is  by  its  detonation.  This  could  be  caused  by  the  proper 
functioning  of  internal  mechanical  or  electrical  mechanisms ,  or  by  the 
application  of  heat  from  an  external  energy  source. 

If  the  probability  or  occurrence  of  the  undesired  event  weasel,  P,  were  to 
be  calculated,  it  would  be  the  product  of  probabilities  of  the  three  directly 
contributing  branches  as  follows: 


P 


^LB  ^CB  ^RB 


(1) 


where : 

P  -  the  probability  of  occurrence  of  the  Head  Event. 

Pj^  -  the  probability  a  round  of  ammunition  is  outside  the  structure,  left 
branch  of  the  tree. 

P^g  -  the  probability  a  person  or  facility  is  exposed,  center  braT^’h  of  the 
tree . 

Pj^  -  the  probability  a  round  of  ammunition  transmits  energy,  right  branch 
of  the  tree. 
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1.6  CONCLUSIONS 


It  is  concluded  that: 

a.  Because  the  developed  Fault  Tree  model  was  more  extensive  than  was 
anticipated,  it  was  impractical,  given  the  scope  of  this  study,  to  quantify. 
Even  so,  it  is  clear  the  possibility  of  the  Head  Event  occuring  does  exist,  but 
only  if  the  complex  set  of  conditions  defined  by  the  tree  have  been  satisfied. 

b.  Allocating  funds  to  totally  eliminate  the  possibility  of  a  kickout's 
occurrence  is  unnecessary  and  unreasonable . 

c.  Elimination  of  the  possibility  of  the  Head  Event  is  impossible. 
However,  along  string  of  events,  which  is  diagramed  in  each  branch  of  the  tree, 
is  required  to  satisfy  that  condition.  That  likelihood  can  be  reduced  by 
selectively  manipulating  events  in  that  string. 

1 . 7  RECOMMENDATIONS 

It  is  recommended  that: 

a.  Operating  restrictions  imposed  on  test  facilities  be  reevaluated  in 
view  of  the  finding  of  this  report. 

b.  Careful  considerations  be  given  to  new  innovative  designs  and 

constructions  techniques  of  protective  structures. 

c.  A  second  study  be  conducted  to  better  define  the  likelihood  of 
occurrence  of  the  Head  Event. 
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APPENDIX  A.  FAULT  TREE  DEFINITIONS 


1.  Cut  Set  -  a  combination  of  fault  events  whose  occurrence  as  a  set  will  cause 
the  top  event. 

2.  Donor  -  a  round  of  ammunition  which  functions  in  the  vicinity  of  other 
rounds  of  ammunition  thus  imparting  energy  to  them. 

3 .  Event 

a.  Refers  to  the  round  detonating  when  regarding  ammunition. 

b.  Refers  to  an  occurrence  in  the  tree. 

4.  Gate  -  connects  the  events  in  the  fault  tree.  Gates  also  determine  the 
mathematical  operations  using  the  rules  of  Boolean  Algebra  to  calculate 
probabilities.  In  the  text  a  gate  appears  as  an  italicized  and  or  an  or. 

An  and  represents  the  logical  condition  INTERSECTION  which  is  multiplicative;  an 
or  gate  represents  the  UNION  and  is  additive. 

5.  Head  or  Top  Event  -  the  main  event  of  the  fault  tree,  the  undesired  outcome. 

6.  Kickout  -  when  a  round  of  anur.unition  which  does  not  detonate  from  an  initial 
event  in  a  structure  is  thrown  from  the  structure. 

7.  Minimal  Cut  Sec  •  the  smallest  combination  of  fault  events  that  causes  the 
Head  Event.  This  gives  a  qualitative  ranking  to  each  fault  event  on  the  tree 
with  regard  to  its  contribution  to  the  head  event. 

8.  Receiver  -  a  round  of  aitununition  which  receives  energy  when  another  round  of 
ammunition  in  Che  vicinity  functions. 

9.  Risk  •  the  expected  value  associated  with  a  given  hazard;  it  is  Che  product 
of  the  severity  of  a  hazard  and  the  likelihood  of  its  occurence.  Probabilities 
have  not  been  calculated  or  assigned  to  individual  events  because  it  is  beyond 
Che  scope  of  this  report  to  do  so.  In  this  report,  risk  has  several  contexts: 
when  pertaining  to  kickout,  it  is  the  consequence  caused  by  a  round  detonating  or 
escaping  a  containment  structure  after  an  event  has  occured;  when  pertaining  to 
a  fault  tree,  it  is  the  head  event. 

10.  Single  Point  Failure  -  an  individual  event  on  the  fault  tree  that  regardless 
of  its  position  on  the  tree,  will  cause  the  head  event  to  take  place. 

11.  Unrelated  -  used  in  reference  r-:'  reople  or  facilities  which  are  not  directly 
involved  in  a  testing  scenario  but  could  be  injured  or  damaged  because  of  their 
proximity  to  a  test  when  a  kickout  occurs. 
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APPENDIX  B.  EXAMPLE  OF  FAULT  TREE  MODEL,  CUT  SETS,  AND  PROBABILITIES 


This  study  would  be  incomplete  without  an  example  demonstrating  the  value  of 
a  fault  tree  analysis.  Using  the  entire  tree  from  the  text  of  the  report  would 
be  a  cvimbersome  and  tedious  adventure.  As  an  illustration  of  how  to  interpret  a 
fault  tree  and  how  to  derive  the  minimal  cut  sets,  consider  the  following 
example.  Figure  C-1  is  based  on  the  fault  tree  in  the  text,  however,  it  is 
terminated  at  the  third  level  of  the  tree.  This  simpler  tree  has  six  fault 
events  and  three  Intermediate  events  leading  to  the  head  or  top  event.  At  least 
some  of  the  fault  events  in  the  third  rank  must  exist  before  the  top  event  can 
occur.  This  can  be  shown  using  the  Laws  of  Boolean  Algebra.  The  following 


symbols  are  directly  taken  from  Figure  C-1; 

TE  -  Al  and  A2  and  AlO  (2) 

Al  -  B1  or  B2  (3) 

A2  -  B5  or  B6  (4) 

AlO  -  B3  or  Bi  (5) 

therefore:  TE  -  Al*A2*AlO  (6) 

-  (B1+B2)(A2*A10) 


-  B1*A2*A10+B2*A2*A10 

-  Bl*AlO(B5+B6)+B2*AlO(B5+B6) 

-  Bl*AlO*B5+Bl*AlO*B6+B2*AlO*B5+B2*B6*AlO 

-  AlO(Bl*B5+Bl*B6+B2*B5+B2*B6) 

-  (B3+B4) (B1*B5+B1*B6+B2*B5+B2*B6) 

-  Bl*B3*85tBl*B4*B5+Bl*B3*B6+Bl*B4*B6  (7) 

+B2*B3*B5+B2*B3*B6+B2*B4*B5+B2*B4*B6 

The  fully  expanded  expression  has  eight  terms,  each  comprised  of  three  fault 
events.  Thus,  the  fewest  number  of  fault  events  that  must  exist  for  the  top 
event  to  occur  is  three.  There  are  eight  such  triplets.  To  simplify  the 
mathematical  gyrations,  a  computer  algorithm  can  be  used  to  derive  the  cut  sets. 
Table  C-2  is  the  software  •  generated  listings  of  singlets  (single  point 
failures),  doublets  and  triplets  chat  represent  the  minimal  cut  sets.  Note  that 
Che  computer  lists  eight  triplets  which  corresponds  «.o  those  shown  in  the  hand 
derivation,  equation  7,  above.  The  probability  of  the  top  events  occurring  is 
the  stim  of  the  products  of  the  probabilities  of  the  minimal  cut  sets,  bottom  of 
Table  C-2,  this  appendix. 
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TABLE  B-1.  EXAMPLE  FAULT  TREE  INPUT  DATA  LIST 

»*♦♦*■*♦♦♦♦*♦*•*♦♦*♦•*♦*■«*•♦♦  ■»****♦♦*♦** 

FAULT  TREE  ANALYSIS  PROGRAh 

INPUT  DATA  List 

TOP  EVENT  ;  INJ  TO  PERSONNEL  OR  FACILITY  DAMAGE 
GATE  DATA 

1  TE  A  3  0  A1  AlO  A2 

2  A1  0  0  2  D&l  D&2  - 

3  AlO  0  0  2  D&3  D&4 

4  A2  0  O  2  DE5  D&o  - 


FAULT 

1 

'<•* 

.  4 

5 

6 


EVENT  DATA 

DPI  D  RND  OUTSIDE  STRUCTURE  0.300D-02 

E»B2  D  RND  THROwf'i  FM  STRUCTUFE  0.  lOOD-02 

DB3  D  F5NL  IN  VCNTY  OF  DET.  O.lOOD-01 

DB4  D  In  F'Tn  OF  FROMT  0.  73<!>D~Ci2 

DPS  D  RnD  DET  O. lOOD-03 

DPto  D  FRGMT  N,'  74'  JOULES  0.  lC><!'D-02 


ROUND  IS  OUTSIDE  OF  STRUCTURE 
EXPOSURE 

ROUND  TRANSMITS  ENERGY 
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TABLE  B-2.  CUT  SETS  FOR  EXAMPLE  FAULT  TREE 


.AULT  TREE  ANALYSIS  FRQGRAn 


MINIMUM  CUT  SE.T  SIZE  *  1 

MAXIMUM  CUT  SET  SIZE  «  3 


CUT  SETS  FOR  INJ  TO  RERSONNEc  OR  FACILITY  DAMAGE 


CUT  SET  «  1 

DSl 

D&3 

DBS 

CUT  SET  RATE 


RND  OUTSIDE  STRUCTURE 
R5N._  In  vCnT »  OF  DET. 
RND  DET 
=  O, ZOOE~OB 


CUT  SET  «  I 

db: 

DBT 

DBo 

CUT  SET  RATE 


Kilt'  C"J  I  S  I  I'c,  STR^'C  Ti.'r.E 
FS’^l.  in  VCNTf  OF  DET. 
FROnT  U'  79  Juu_£E 
*  0.3'j0£—C'7 


CUT  SET  «  3 

DBl 

DBA 

DBS 

CUT  SET  RATE 


RND  OUTSIDE  STRUCTURE 
IN  FTH  OF  FRoMT 
RND  DET 
=  0.225E-06 


CUT  SET  «  4 

DBl 

DB4 

DBA 

CUT  SET  RATE 


RND  OUTSIDE  STRUCTURE 
IN  FTH  OF  FRGMT 
FRGMT  W/  79  JOULES 
»  0.225E-07 


CUT  SET  #  5 

DB2 

DB3 

DBS 

CUT  SET  RATE 


RND  THROWN  FM  STRUCTURE 
FSNL  in  VCNTY  of  DET. 
RND  DET 
■  O. I COE -08 


CUT  SET  «  6 

DB2  RND  THROWN  FM  STRUCTURE 

DB3  PSNL  IN  VCNTY  OF  DET. 

DBA  FRGMT  W/  >79  JOULES 

CUT  SET  RATE  ■  O, lOOE-07 


CUT  SET  »  7 

DB2 

DB4 

DBS 

CUT  SET  RATE 


RND  THROWN  FM  STRUCTURE 
IN  PTH  of  FRGMT 
RND  DET 
-  0.750E-09 


CUT  SET  «  e 

DB2  RND  THROWN  FM  STRUCTURE 

DB4  IN  PTH  OF  FRGMT 

DBA  FRGMT  W/  79  JOULES 

CUT  SET  RATE  -  0.7S0E-0e 


END  OF  CUT  SET  LIST  FOR  SIZES  1  THRU  3 


0. 300D-02 
0. lOOD-01 
O. lOOD-03 


0. 300D-02 
0. lOOD-01 
0. lOOD-02 


O. 300D-02 
O. 750D-02 
0. lOOD-03 


0.300D-02 
0. 7500-02 
0.  lOOD-02 


0. lOOD-02 
O. lOOD-Ol 
0. 100D-03 


0. lOOD-02 
O. lOOD-01 
0. lOOD-02 


O. lOOD-02 
0.750D-02 
O. lOOD-03 


0. lOOD-02 
0.750D-02 
0. lOOD-02 


CALCULATED  TOP  EVENT  RATE  ■  0.770E-07 
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Culling  those  fault  events  that  occur  most  frequently  in  the  cut  sets  can 
reduce  the  likelihood  of  the  head  event.  By  changing  the  probability  of  the 
culled  events,  their  occurrence  can  be  controlled  or  elioinated.  To  change  the 
probability  of  an  event  implies  a  change  in  state  or  condition.  This  can  be 
accomplished  by  employing  an  engineering  modification,  a  simple  procedural 
change,  or  a  warning  device.  This  technique  can  be  used  to  eliminate  single 
point  failures  when  they  occur. 
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APPENDIX  D.  DISTRIBUTION  LIST 


TECOM  Project  No.  7-CO-R89-APO-001 


Addressee 


No.  of 
Copies 


Conunander 

U.S.  Army  Test  and  Evaluation  Command 

ATTN:  AMSTE-TC-M  1 

AMSTE-ST-S  1 

Aberdeen  Proving  Ground,  MD  21005-5055 

Commander 

U.S.  Army  Materiel  Command 

ATTN:  AMCSF-E  1 

5001  Eisenhower  Avenue 
Alexandria,  VA  22333-0001 

Commander 

U.S.  Army  Armament  Research,  Development  and 
Engineering  Center 

ATTN:  SMCAR-SFS(O)  1 

Picatinny  Arsenal,  NJ  07806-5000 

Commander 

U.S.  Army  Chemical  Research  and  Development  Command 

ATTN:  SMCCR-SFS  1 

Aberdeen  Proving  Ground,  MD  21010-5423 

Commander 

U.S.  Army  Training  and  Doctrine  Command 

ATTN:  ATEN-S  1 

Fort  Monroe,  VA  23651-5000 

Commander 

U.S.  Army  White  Sands  Missile  Range 

ATTN:  STEWS- DP -F  1 

White  Sands  Missile  Range,  NM  88002-5031 

Commander 

U.S.  Army  Yuma  Proving  Ground 

ATTN:  STEYP-SAF  1 

Yuma,  AZ  85364-9102 

Commander 

U.S.  Army  Tank-Automotive  Command 

ATTN:  AMSTA-CZ  1 

Warren,  MI  48397-5000 
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Addresse 


No .  of 
Copies 


Commander 

U.S.  Army  Laboratory  Command 

ATTN:  AMSLC-SO 

Adelphi,  MD  20783-1145 

1 

Commander 

U.S.  Army  Environmental  Hygiene  Agency 

ATTN:  HSHB-0 

Aberdeen  Proving  Ground,  MD  21010-5422 

1 

Commander 

U.S.  Army  Belvoir  Research,  Development  and 

Engineering  Center 

ATTN:  STRBE-Q 

Fort  Belvoir,  VA  22060-5606 

1 

Commander 

U.S.  Army  Safety  Center 

ATTN:  PESC-SE 

Fort  Rucker,  AL  36362 

1 

Commander 

U.S.  Army  TRADOC  Combined  Arms  Test  Activity 

ATTN:  SLCHE-FH  (Dr.  J.  C.  Geddle) 

Fort  Hood,  TX  76544-5065 

1 

Commander 

U.S.  Army  Natick  Research,  Development  and 

Engineering  Center 

ATTN:  STRNC-S 

Natick,  MA  01760-5000 

1 

Commander 

U.S.  Army  Aberdeen  Proving  Ground 

Installation  Support  Activity 

ATTN:  STEAP-SA 

Aberdeen  Proving  Ground,  MD  21005 

1 

Commandant 

U.S.  Army  Infantry  Board 

ATTN:  SLCHE-FB 

1 

Building  4  -  Room  313 

Fort  Banning,  GA  31905-5400 

• 
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Conmander 

DoD  Explosive  Safety  Board 
Room  856-C 

Hoffman  Building  No.  1 
2461  Eisenhower  Avenue 
Alexandria,  VA  22331 

Commander 

U.S.  Army  Defense  Ammunition  Center 
and  School 
ATTN:  SMCAC-DEN 
Savannah,  IL  61074-9639 

Commander 

U.S.  Army  Engineering  District,  Middle  East 
ATTN:  MEDSO 
APO,  NY  09038 

Commander 

U.S.  Army  Engineering  District,  Baltimore 
ATTN:  NABSA 
PO  Box  1715 
Baltimore,  MD  21203 

Commander 

U.S.  Army  Engineering  Division 

ATTN:  HNDSO 

PO  Box  1600 

West  Station 

Huntsville,  AL  35807 

Commandant 

U.S,  Army  Air  Defense  Artillery  School 
ATTN:  ATSA-CD-HE  (Mr.  E.  Balarzs) 

Building  5800 

Fort  Bliss,  TX  79916-7050 

Project  Manager 
Training  Devices 
ATTN:  AMPM-TND-SP 
Naval  Training  Center 
Orlando,  FL  32813 


Addressee 


No .  of 
Copies 


Director 

U.S.  Army  Materiel  Command 
Field  Safety  Activity 

aTTN:  AMX0S-L»  1 

Charleston,  IN  47111-9669 

Director 

U.S.  Army  Logistics  Management  Center 
School  of  Engineering  and  Logistics 
ATTN:  AMXMC-SEL-E  1 

Red  River  Army  Depot 
Texarkana,  TX  75507-5000 

Director 

U.S.  Army  Production  Base  Modernization  Activity 

ATTN:  AMSMC-PBT-PD  1 

Picatinny  Arsenal,  NJ  07801-5000 

Director 

U.S.  Army  Materiel  Systems  Analysis  Activity 

ATTN:  AMXSY-RI  1 

Aberdeen  Proving  Ground,  MD  21005-5071 

HQDA 

ATTN:  DACS-SF  1 

Washington,  DC  20310-0200 

HQDA  (DAEN-ECS)  1 

Office  of  the  Chief  of  Engineers 
Washington,  D.C.  20314 

Commander 

U.S.  Army  Europe,  Heidelberg, 

FRG,  CINCUSAREUR 

ATTN:  AEAGA-S  1 

APO,  NY  09403-0101 

Commander 

U.S.  Army  Information  Systems  Command 

ATTN:  ASPE-S  1 

Fort  Huachuca,  AZ  85613-5000 

Commander 

U.S.  AriK'r  Armament,  Munitions  and  Chemical  Command 

ATTN:  AMSMC-SF  1 

Rock  Island,  IL  61299-6000 
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Commander 

U.S.  Army  Aviation  Systems  Command 
ATTN:  AMSAV-X 
Building  103 

4300  Goodfellow  Boulevard 
St.  Louis,  HO  63120-1798 

Commander 

U.S.  Army  Communications -Electronics  Command 

ATTN:  AMSEL-SF 

Fort  Monmouth,  NJ  07703-5000 

Commander 

U.S.  Army  Depot  Systems  Command 
ATTN:  AMSDS-SF 
Chambersburg,  PA  17201-4170 

Commander 

U.S.  Army  Missile  Command 
ATTN:  AMSMI-SF 

Redstone  Arsenal,  AL  35898-5130 
Commander 

U.S.  Army  Dugway  Proving  Grounds 
ATTN:  STEDP-SA 
Dugway,  UT  84022-5000 

Commander 

U.S,  Army  Electronic  Proving  Grounds 

ATTN:  STEEP -RM-S 

Fort  Huachuca,  AZ  85613-7110 

Commander 

U.S.  Army  Troop  Support  Command 
ATTN:  AMSTR-X 
Building  101 

4300  Goodfellow  Boulevard 
St.  Louis,  MO  63120-1798 

Commander 

U.S.  Army  Toxic  and  Hazardous  Materials  Agency 
ATTN:  CETHA-SF 
Building  E4460 

Aberdeen  Proving  Ground,  MD  21010-5401 


Addressee 


No .  of 
Copies 


Director 

U.S.  Army  Ballistic  Research  Laboratory 


ATTN:  SLCBR-DD-T  (STINFO)  2 

Aberdeen  Proving  Ground,  MD  21005-5066 

Commander 

U.S.  Army  Combat  Systems  Test  Activity 

ATTN:  STECS-SO  7 

STECS-DA-ID  7 

STECS-PO  1 

STECS-AD-A  1 

Aberdeen  Proving  Ground,  MD  21005-5059 

Administration 

Defense  Technical  Information  Center 

ATTN:  FDAC  2 

Cameron  Station 
Alexandria,  VA  22304-6145 
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